CVE-2022-49982

Source
https://cve.org/CVERecord?id=CVE-2022-49982
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49982.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49982
Downstream
Related
Published
2025-06-18T11:00:44.285Z
Modified
2026-05-15T04:05:50.606048407Z
Summary
media: pvrusb2: fix memory leak in pvr_probe
Details

In the Linux kernel, the following vulnerability has been resolved:

media: pvrusb2: fix memory leak in pvr_probe

The error handling code in pvr2hdwcreate forgets to unregister the v4l2 device. When pvr2hdwcreate returns back to pvr2contextcreate, it calls pvr2contextdestroy to destroy context, but mp->hdw is NULL, which leads to that pvr2hdwdestroy directly returns.

Fix this by adding v4l2deviceunregister to decrease the refcount of usb interface.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49982.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.30
Fixed
4.9.327
Type
ECOSYSTEM
Events
Introduced
4.10.0
Fixed
4.14.292
Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.257
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.212
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.141
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.65
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.19.7

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49982.json"